better-supabase 0.13.0 → 0.15.0

package/dist/index-Do2ChN_y.d.ts

@@ -0,0 +1,287 @@
+import { b as DbError, f as Result, t as AsyncResult } from "./result-DZeA5KS6.js";
+import { X as StoragePath, a as BucketConnectOptions, g as StorageAdminClient, i as BucketConfig, j as StorageClient, n as Bucket, r as BucketClient, s as BucketPolicy, x as TransformOptions } from "./bucket-CiNi8sIw.js";
+import { SupabaseClient } from "@supabase/supabase-js";
+//#region src/storage/errors.d.ts
+/** Maps a Storage error (`StorageApiError`, fetch failures) to a `DbError`. */
+declare function fromStorageError(raw: unknown, table?: string): DbError;
+//#endregion
+//#region src/storage/image-url.d.ts
+interface StorageImageOptions {
+  /** Project URL, e.g. `import.meta.env.PUBLIC_SUPABASE_URL`. */
+  readonly url: string;
+  /** Resize mode for the transform. Defaults to Storage's own (`cover`). */
+  readonly resize?: "cover" | "contain" | "fill";
+}
+/** The size and quality to render an image at. */
+interface StorageImageSize {
+  readonly width: number;
+  readonly height?: number | undefined;
+  readonly quality?: number | undefined;
+}
+/**
+ * Turns public Storage object URLs into Supabase image transformation URLs
+ * (`/render/image/public`) at a given size. Any other URL (local files, other
+ * hosts, signed URLs) comes back as `undefined`: a signed URL's token covers
+ * the transform it was signed with, so sign it with `renderUrl()`.
+ *
+ * A crop keeps its shape: when `size` has no `height` but `src` already carries
+ * a `width` and `height` (a render URL from a variant), the height scales with
+ * the new width. Both sides stop at Storage's 2500 limit by the same factor.
+ *
+ * ```ts
+ * const imageUrl = storageImageUrl({ url: SUPABASE_URL });
+ * imageUrl(avatar, { width: 96 }) ?? avatar;
+ * ```
+ */
+declare function storageImageUrl(options: StorageImageOptions): (src: string, size: StorageImageSize) => string | undefined;
+/**
+ * Builds a `srcset` of public Storage images at `densities` times the size
+ * (`1x` and `2x` by default) for a plain `<img>`. Returns `undefined` for the
+ * URLs `storageImageUrl` leaves alone.
+ *
+ * ```tsx
+ * const srcSet = storageImageSrcSet({ url: SUPABASE_URL });
+ * <img
+ *   src={avatar}
+ *   srcSet={srcSet(avatar, { width: 96, height: 96 })}
+ *   width={96}
+ *   height={96}
+ * />;
+ * ```
+ */
+declare function storageImageSrcSet(options: StorageImageOptions): (src: string, size: StorageImageSize, densities?: readonly number[]) => string | undefined;
+//#endregion
+//#region src/storage/registry.d.ts
+/** Any bucket definition from `defineBucket` or a preset. */
+type AnyBucket = Bucket<string>;
+type BucketMap = Readonly<Record<string, AnyBucket>>;
+/** The bucket ids of a registry's buckets. */
+type BucketIdOf<B extends BucketMap> = B[keyof B]["id"];
+/** The bucket of a registry whose id is `I`. */
+type BucketWithId<B extends BucketMap, I extends string> = Extract<B[keyof B], {
+  readonly id: I;
+}>;
+/** A stored object as rows keep it: the bucket id and the object path. */
+interface StoredRef {
+  /** The bucket id, e.g. a `bucket_id` column. */
+  readonly bucket: string;
+  readonly path: string;
+}
+/**
+ * A stored reference whose bucket is registered and whose path matches one of
+ * its templates.
+ */
+interface ResolvedRef<B extends BucketMap> {
+  readonly bucket: B[keyof B];
+  readonly path: StoragePath<BucketIdOf<B>>;
+}
+/** A resolved reference with a client of its bucket. */
+interface ConnectedRef<B extends BucketMap> extends ResolvedRef<B> {
+  readonly storage: BucketClient<string, BucketIdOf<B>>;
+}
+interface Buckets<B extends BucketMap> {
+  /** The bucket definitions, by the names given. */
+  readonly buckets: B;
+  /** Every registered bucket id, in the order given. */
+  readonly ids: readonly BucketIdOf<B>[];
+  /** Whether `id` names a registered bucket. */
+  has(id: string): id is BucketIdOf<B>;
+  /** The bucket with this id, or `invalid_input` for an id no bucket has. */
+  byId<I extends BucketIdOf<B>>(id: I): Result<BucketWithId<B, I>>;
+  byId(id: string): Result<B[keyof B]>;
+  /**
+   * Checks a stored `{ bucket, path }`: the bucket must be registered and the
+   * path must match one of its templates. Either failure is `invalid_input`.
+   */
+  resolve(ref: StoredRef): Result<ResolvedRef<B>>;
+  /**
+   * `resolve`, then `connect` the bucket and check the path with the connected
+   * client, so a bucket with `tenant` also refuses another tenant's path
+   * (`forbidden`). No request is made.
+   */
+  connectStored(client: StorageClient, ref: StoredRef, options?: BucketConnectOptions): Result<ConnectedRef<B>>;
+}
+/**
+ * A registry of bucket definitions by id, for rows that store a bucket id next
+ * to an object path (files, attachments, sources). An id no bucket has, and a
+ * path outside the bucket's templates, are errors, never a fallback bucket.
+ *
+ * ```ts
+ * export const buckets = defineBuckets({ files, attachments, logos });
+ *
+ * const ref = buckets.connectStored(
+ *   supabase,
+ *   { bucket: row.bucketId, path: row.path },
+ *   { context: db.$context },
+ * );
+ * if (ref.ok) await ref.data.storage.signedUrl(ref.data.path);
+ * ```
+ */
+declare function defineBuckets<const B extends BucketMap>(buckets: B): Buckets<B>;
+//#endregion
+//#region src/storage/presets.d.ts
+/** The image types browsers display everywhere. */
+declare const IMAGE_TYPES: readonly string[];
+interface ImageBucketOptions<P extends string, Id extends string, V extends string = never> {
+  readonly id?: Id;
+  /** The path template; keep the preset's placeholders the policy relies on. */
+  readonly path?: P | readonly [P, ...P[]];
+  /** Defaults to `true`: images load from their public URL without signing. */
+  readonly public?: boolean;
+  readonly fileSizeLimit?: string | number;
+  readonly allowedMimeTypes?: readonly string[];
+  /** Replaces the preset's policy. */
+  readonly policy?: BucketPolicy;
+  /** Replaces the preset's variants. */
+  readonly variants?: Readonly<Record<V, TransformOptions>>;
+}
+type AvatarBucketOptions<P extends string, Id extends string, V extends string = never> = ImageBucketOptions<P, Id, V>;
+interface OrganizationLogoBucketOptions<P extends string, Id extends string, V extends string = never> extends ImageBucketOptions<P, Id, V> {
+  /**
+   * The permission that may upload, replace and delete a logo, checked through
+   * the access contract. Defaults to `organization.update`, the `organizations`
+   * module's update permission.
+   */
+  readonly permission?: string;
+  /**
+   * The tenant segment connected clients are held to. `false` lets one client
+   * upload for any organization the policy allows. Defaults to `{ param:
+   * 'organizationId' }`.
+   */
+  readonly tenant?: BucketConfig["tenant"] | false;
+}
+declare const AVATAR_PATH = "{userId}/avatar-{version}.{ext}";
+declare const LOGO_PATH = "{organizationId}/logo-{version}.{ext}";
+/** The variant names of the image presets. */
+type ImageVariant = "sm" | "md" | "lg";
+/**
+ * A bucket for profile pictures: `{userId}/avatar-{version}.{ext}`, public, 2
+ * MiB of images, written only by their owner (the `owner` policy). Variants
+ * `sm`, `md` and `lg` are 48, 96 and 256 pixel square crops.
+ */
+declare function avatarBucket<const P extends string = typeof AVATAR_PATH, const Id extends string = "avatars", const V extends string = ImageVariant>(options?: AvatarBucketOptions<P, Id, V>): Bucket<P, Id, V>;
+/**
+ * A bucket for organization logos: `{organizationId}/logo-{version}.{ext}`,
+ * public, 2 MiB of images, written by members with the update permission
+ * through the access contract (`tenant_ids_with`), so it follows the app's
+ * roles. Variants `sm`, `md` and `lg` fit the whole logo in a 64, 128 or 256
+ * pixel square.
+ */
+declare function organizationLogoBucket<const P extends string = typeof LOGO_PATH, const Id extends string = "organization-logos", const V extends string = ImageVariant>(options?: OrganizationLogoBucketOptions<P, Id, V>): Bucket<P, Id, V>;
+//#endregion
+//#region src/storage/analytics-bucket.d.ts
+/**
+ * The Iceberg REST catalog of an analytics bucket, from
+ * `storage.analytics.from(id)`.
+ */
+type AnalyticsCatalog = ReturnType<SupabaseClient["storage"]["analytics"]["from"]>;
+interface AnalyticsBucketClient {
+  /** Creates the bucket when it is missing. Needs the secret key. */
+  apply(): AsyncResult<{
+    readonly created: boolean;
+  }>;
+  /**
+   * The bucket's Iceberg catalog: namespaces and tables, each call returning `{
+   * data, error }`.
+   */
+  catalog(): AnalyticsCatalog;
+}
+interface AnalyticsBucket<Id extends string> {
+  readonly id: Id;
+  connect(client: StorageAdminClient): AnalyticsBucketClient;
+}
+/**
+ * A Storage analytics bucket: Apache Iceberg tables that query engines read
+ * through the Iceberg REST catalog.
+ *
+ * ```ts
+ * export const events = defineAnalyticsBucket({ id: "events" });
+ * await events.connect(admin).apply().orThrow();
+ * ```
+ */
+declare function defineAnalyticsBucket<const Id extends string>(config: {
+  readonly id: Id;
+}): AnalyticsBucket<Id>;
+//#endregion
+//#region src/storage/vector-bucket.d.ts
+type VectorDistance = "cosine" | "euclidean" | "dotproduct";
+interface VectorIndexConfig {
+  /** Number of values in every vector, e.g. 1536 for `text-embedding-3-small`. */
+  readonly dimension: number;
+  /** Defaults to `cosine`. */
+  readonly distanceMetric?: VectorDistance;
+  /** Metadata keys stored with each vector but not usable in `filter`. */
+  readonly nonFilterableMetadataKeys?: readonly string[];
+}
+interface VectorBucketConfig<Id extends string, I extends Readonly<Record<string, VectorIndexConfig>>> {
+  readonly id: Id;
+  readonly indexes: I;
+}
+type VectorMetadata = Readonly<Record<string, unknown>>;
+interface VectorRecord<M extends VectorMetadata = VectorMetadata> {
+  readonly key: string;
+  readonly vector: readonly number[];
+  readonly metadata?: M;
+}
+interface VectorHit<M extends VectorMetadata = VectorMetadata> {
+  readonly key: string;
+  /** Set by `query()`: smaller is closer for every metric. */
+  readonly distance?: number;
+  readonly metadata?: M;
+  readonly vector?: readonly number[];
+}
+interface VectorQueryOptions {
+  /** Number of matches, defaults to 10. */
+  readonly topK?: number;
+  /**
+   * A metadata filter, e.g. `{ organizationId: "o1" }` or `{ year: { $gte: 2024
+   * } }`.
+   */
+  readonly filter?: VectorMetadata;
+  /** Return each match's metadata. Defaults to `true`. */
+  readonly metadata?: boolean;
+}
+interface VectorIndexClient<M extends VectorMetadata = VectorMetadata> {
+  readonly name: string;
+  readonly dimension: number;
+  /** Inserts or replaces vectors by key, in batches of 500. */
+  put(records: readonly VectorRecord<M>[]): AsyncResult<number>;
+  /** The nearest vectors, closest first. */
+  query(vector: readonly number[], options?: VectorQueryOptions): AsyncResult<readonly VectorHit<M>[]>;
+  /** Vectors by key; missing keys are left out. */
+  get(keys: readonly string[], options?: {
+    readonly vector?: boolean;
+  }): AsyncResult<readonly VectorHit<M>[]>;
+  remove(keys: readonly string[]): AsyncResult<readonly string[]>;
+}
+interface VectorBucketClient<I extends string> {
+  /**
+   * Creates the bucket and any missing index. An index with another dimension
+   * or metric is a `conflict`.
+   */
+  apply(): AsyncResult<{
+    readonly created: readonly string[];
+  }>;
+  index<M extends VectorMetadata = VectorMetadata>(name: I): VectorIndexClient<M>;
+}
+interface VectorBucket<Id extends string, I extends Readonly<Record<string, VectorIndexConfig>>> {
+  readonly id: Id;
+  readonly indexes: I;
+  connect(client: StorageAdminClient): VectorBucketClient<keyof I & string>;
+}
+/**
+ * A Storage vector bucket with typed indexes. Storage keeps the vectors outside
+ * Postgres; use the `vector-search` module for pgvector in a table.
+ *
+ * ```ts
+ * export const embeddings = defineVectorBucket({
+ *   id: "embeddings",
+ *   indexes: { documents: { dimension: 1536 } },
+ * });
+ * const docs = embeddings.connect(admin).index("documents");
+ * await docs.put([{ key: doc.id, vector, metadata: { organizationId } }]);
+ * ```
+ */
+declare function defineVectorBucket<const Id extends string, const I extends Readonly<Record<string, VectorIndexConfig>>>(config: VectorBucketConfig<Id, I>): VectorBucket<Id, I>;
+//#endregion
+export { StoredRef as A, AnyBucket as C, Buckets as D, BucketWithId as E, storageImageUrl as F, fromStorageError as I, StorageImageOptions as M, StorageImageSize as N, ConnectedRef as O, storageImageSrcSet as P, organizationLogoBucket as S, BucketMap as T, IMAGE_TYPES as _, VectorHit as a, OrganizationLogoBucketOptions as b, VectorMetadata as c, defineVectorBucket as d, AnalyticsBucket as f, AvatarBucketOptions as g, defineAnalyticsBucket as h, VectorDistance as i, defineBuckets as j, ResolvedRef as k, VectorQueryOptions as l, AnalyticsCatalog as m, VectorBucketClient as n, VectorIndexClient as o, AnalyticsBucketClient as p, VectorBucketConfig as r, VectorIndexConfig as s, VectorBucket as t, VectorRecord as u, ImageBucketOptions as v, BucketIdOf as w, avatarBucket as x, ImageVariant as y };

package/dist/index.d.ts

@@ -1,80 +1,17 @@
 /// <reference lib="esnext.temporal" />
-import { n as DbException, t as escapeLike } from "./escape-like-DuKupGUV.js";
-import { A as isConflict, C as DbErrorMatchers, D as ValidationIssue, E as RawDbError, F as statusOf, M as isForeignKey, N as mapDbError, O as dbError, P as matchDbError, S as DbErrorKinds, T as ErrorMapper, _ as ok, a as BetterResultOk, b as DbError, c as DbErrorClasses, d as Ok, f as Result, g as fromBetterResult, h as err, i as BetterResultErrors, j as isDbError, k as isCheck, l as Err, m as defineBetterResultErrors, n as BetterResultApi, o as BetterResultValue, r as BetterResultErr, s as DbErrorClass, t as AsyncResult, u as MappedDbError, v as toBetterResult, w as DbErrorOf, x as DbErrorKind, y as toDbError } from "./result-mijqfoJN.js";
-import { n as validate, t as StandardSchemaV1 } from "./standard-16AIDny5.js";
-import { A as RelationTypes, B as TableKey, C as ModelFlags, D as PrimaryKeyValue, E as PrimaryKeyColumn, F as SchemaMeta, G as Update, H as UniqueConstraint, I as Simplify, K as WritableColumns, L as SubjectRef, M as ResultColumn, N as Row, O as RealtimeTableMeta, P as Schema, R as SubjectTypeOf, S as Insert, T as ModelsOf, U as UniqueKeyName, V as TableMeta, W as UniqueWhere, _ as FunctionResult, a as AnyModels, b as FunctionsOf, c as Casing, d as Codec, f as ColumnMeta, g as FunctionMeta, h as ForeignKeyConstraint, i as AnyFunctions, j as Relations, k as RelationMeta, l as CheckConstraint, m as Flags, n as AccessPolicySql, o as BucketMeta, p as DatabaseOf, r as AccessTopicPolicy, s as BucketPolicyName, t as AccessBucketPolicy, u as ClaimsMeta, v as FunctionSignature, w as ModelTypes, x as GeneratedColumns, y as FunctionTypes, z as TableFlags } from "./types-DmshMaXz.js";
-import { C as Selection, D as not, E as column, O as or, S as SelectOp, T as and, _ as MutationOp, a as AggregateFn, b as Quantifier, c as Condition, d as FunctionSource, f as Include, g as MutationKind, h as MutationIntent, i as RpcContext, l as CountMode, m as Measure, n as ExecuteResult, o as Aggregation, p as InsertOp, r as Executor, s as ColumnOp, t as ExecuteContext, u as DeleteOp, v as Operation, w as UpdateOp, x as SelectColumn, y as OrderTerm } from "./executor-C29668fO.js";
-import { O as BlockEventType, T as BlockEvent, a as EventHandler, c as MutationNotice, d as RpcNotice, i as ErrorEvent, l as QueryEvent, n as AuthOutageEvent, o as EventHub, r as BetterSupabaseEvents, s as EventName, t as AuthEvent, u as RefreshEvent, wt as Events, xt as EventMap } from "./events-DhGgwqQA.js";
-import { a as ExtensionOf, c as MutationEvent, d as Plugin, f as RepositoryApi, g as definePlugin, h as WithExtension, i as CallOptions, l as NoExtension, m as RequestContext, n as AnyPlugin, o as HasFlag, p as RepositoryExtension, r as ApplyExtension, s as HookArgs, t as Actor, u as PLUGIN_API_VERSION } from "./plugin-DouW0Kvg.js";
+import { n as DbException, t as escapeLike } from "./escape-like-PReMbEEU.js";
+import { A as isConflict, C as DbErrorMatchers, D as ValidationIssue, E as RawDbError, F as statusOf, M as isForeignKey, N as mapDbError, O as dbError, P as matchDbError, S as DbErrorKinds, T as ErrorMapper, _ as ok, a as BetterResultOk, b as DbError, c as DbErrorClasses, d as Ok, f as Result, g as fromBetterResult, h as err, i as BetterResultErrors, j as isDbError, k as isCheck, l as Err, m as defineBetterResultErrors, n as BetterResultApi, o as BetterResultValue, r as BetterResultErr, s as DbErrorClass, t as AsyncResult, u as MappedDbError, v as toBetterResult, w as DbErrorOf, x as DbErrorKind, y as toDbError } from "./result-DZeA5KS6.js";
+import { n as validate, t as StandardSchemaV1 } from "./standard-DBV730sF.js";
+import { $ as RecordRef, A as BucketMeta, At as NoExtension, B as FunctionMeta, Bt as Executor, C as not, Ct as ApplyExtension, D as AccessTopicPolicy, Dt as HasFlag, E as AccessPolicySql, Et as ExtensionsOf, F as Codec, Ft as RequestContext, G as GeneratedColumns, H as FunctionSignature, I as ColumnMeta, It as WithExtension, J as ModelTypes, K as Insert, L as DatabaseOf, Lt as definePlugin, M as Casing, Mt as Plugin, N as CheckConstraint, Nt as RepositoryApi, O as AnyFunctions, Ot as HookArgs, P as ClaimsMeta, Pt as RepositoryExtension, Q as RealtimeTableMeta, R as Flags, Rt as ExecuteContext, S as column, St as AnyPlugin, T as AccessBucketPolicy, Tt as ExtensionOf, U as FunctionTypes, V as FunctionResult, Vt as RpcContext, W as FunctionsOf, X as PrimaryKeyColumn, Y as ModelsOf, Z as PrimaryKeyValue, _ as SelectColumn, a as CountMode, at as Schema, b as UpdateOp, c as Include, ct as SubjectTypeOf, d as MutationIntent, dt as TableMeta, et as RelationMeta, f as MutationKind, ft as UniqueConstraint, g as Quantifier, gt as WritableColumns, h as OrderTerm, ht as Update, i as Condition, it as Row, j as BucketPolicyName, jt as PLUGIN_API_VERSION, k as AnyModels, kt as MutationEvent, l as InsertOp, lt as TableFlags, m as Operation, mt as UniqueWhere, n as Aggregation, nt as Relations, o as DeleteOp, ot as SchemaMeta, p as MutationOp, pt as UniqueKeyName, q as ModelFlags, r as ColumnOp, rt as ResultColumn, s as FunctionSource, st as Simplify, t as AggregateFn, tt as RelationTypes, u as Measure, ut as TableKey, v as SelectOp, w as or, wt as CallOptions, x as and, xt as Actor, y as Selection, z as ForeignKeyConstraint, zt as ExecuteResult } from "./types-DFdg_4yN.js";
+import { Ct as Events, O as BlockEventType, T as BlockEvent, a as EventHandler, bt as EventMap, c as MutationNotice, d as RpcNotice, i as ErrorEvent, l as QueryEvent, n as AuthOutageEvent, o as EventHub, r as BetterSupabaseEvents, s as EventName, t as AuthEvent, u as RefreshEvent } from "./events-vcqenSYU.js";
 import { i as silentLogger, n as Logger, r as consoleLogger, t as LogFields } from "./logger-DWVYUmwi.js";
-import { a as ProblemFormat, c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, t as BlockProblemOptions, u as problemResponse } from "./problem-D_DEBfMn.js";
-import { t as SPEC_PINS } from "./spec-pins-CZ2CL8YZ.js";
-import { $ as specTables, A as UpsertManyArgs, At as PostgrestClientLike, B as ReadSetParamTypes, Bt as recordStats, C as Repository, Ct as ReadArgs, D as RpcOptions, Dt as SortDirection, Et as SelectArg, F as InferReadSetParams, Ft as RpcDefinition, G as isReadSet, Gt as MemoryCache, H as ReadSetParams, Ht as BucketsHelper, I as ReadSet, It as SupabaseOptions, J as QuerySpec, Jt as rowKey, K as readSetTables, Kt as cacheTargetOf, L as ReadSetAuth, Lt as DbStats, M as WriteManyArgs, Mt as explainPostgrest, N as SearchArgs, Nt as postgrestExecutor, O as UpdateArgs, Ot as SortSpec, Pt as ConnectOptions, Q as isQuerySpec, R as ReadSetOptions, Rt as EMPTY_STATS, St as Payload, T as Returned, Tt as RequestArgs, U as ReadSetResult, Ut as CacheAdapter, V as ReadSetParamValue, Vt as BucketRegistry, W as defineReadSet, Wt as CacheTarget, X as Specs, Y as ReadMethod, Yt as rpcCacheTargets, Z as TableSpecs, _t as MeasureKey, a as CursorPageArgs, at as ColumnOrderBy, b as PageOf, bt as OrderByArg, c as DeleteArgs, ct as CountArgs, d as ManyResult, dt as FindManyArgs, et as AggregateArgs, f as ManyReturningArgs, ft as FindOnlyArgs, g as OffsetRangeArgs, gt as MeasureArg, h as OffsetPageArgs, ht as JsonPathOps, i as CursorPage, it as AggregateRow, j as WriteArgs, jt as PostgrestExecutorOptions, k as UpsertArgs, kt as WhereInput, l as DeleteExt, lt as FieldFilter, m as OffsetPage, mt as IncludeArgs, n as defineSupabase, nt as AggregateOrderByArg, o as Db, ot as ColumnOrderByArg, pt as IncludeArg, q as InferResult, qt as memoryCache, r as ConflictTarget, rt as AggregateResult, s as DbHelpers, st as CountArg, t as BetterSupabase, tt as AggregateOrderBy, u as FindExt, ut as FindFirstArgs, vt as MutableWhere, w as RepositoryOf, wt as RelationMeasureArg, xt as OrderByInput, yt as NumericMeasureArg, z as ReadSetParamType, zt as StatsRecorder } from "./define-D0LSXmUP.js";
-import { X as StoragePath } from "./bucket-DBay-ICp.js";
-import { a as PostgrestPlan, n as PlanLimit, o as compilePostgrest, r as PlanOrder, t as PlanFilter } from "./postgrest-DGjrW4sK.js";
-import { n as postgrestCompiler, t as Compiler } from "./compiler-DCotQWcs.js";
-import { StandardJSONSchemaV1, StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
-//#region src/core/table-json-schema.d.ts
-/** Validator for one scalar, independent of the target library. */
-type ScalarKind = {
-  readonly kind: "uuid";
-} | {
-  readonly kind: "string";
-} | {
-  readonly kind: "integer";
-} | {
-  readonly kind: "number";
-} | {
-  readonly kind: "boolean";
-} | {
-  readonly kind: "datetime";
-} | {
-  readonly kind: "date";
-} | {
-  readonly kind: "instant";
-} | {
-  readonly kind: "plainDateTime";
-} | {
-  readonly kind: "bigint";
-} | {
-  readonly kind: "json";
-} | {
-  readonly kind: "enum";
-  readonly values: readonly string[];
-} | {
-  readonly kind: "unknown";
-};
-interface FieldOptions {
-  readonly nullable?: boolean;
-  /** The key may be left out. A present key never accepts `undefined`. */
-  readonly optional?: boolean;
-  readonly array?: boolean;
-  /** Filled by a plugin (`timestamps()`, `actor()`, `softDelete()`). */
-  readonly readOnly?: boolean;
-  readonly description?: string;
-  readonly examples?: readonly unknown[];
-  readonly minimum?: number;
-  readonly exclusiveMinimum?: number;
-  readonly maximum?: number;
-  readonly exclusiveMaximum?: number;
-  readonly minLength?: number;
-  readonly maxLength?: number;
-  /** Validates a typed jsonb column; its JSON Schema is used when it has one. */
-  readonly schema?: StandardSchemaV1$1;
-}
-/**
- * One column of a table schema. `custom` is a jsonb column with a TypeScript
- * type from the config and no schema: any value except `undefined` passes.
- */
-type FieldSpec = (ScalarKind | {
-  readonly kind: "custom";
-}) & FieldOptions;
-interface TableSchemaSpec {
-  readonly title?: string;
-  readonly description?: string;
-  readonly fields: Readonly<Record<string, FieldSpec>>;
-}
-//#endregion
+import { a as ProblemFormat, c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, t as BlockProblemOptions, u as problemResponse } from "./problem-DNwN8iGz.js";
+import { $t as MemoryCache, A as OffsetRangeArgs, At as IncludeArg, B as RowFilter, Bt as Payload, C as GetKey, Ct as AggregateRow, Dt as CountArgs, E as ManyWriteArgs, Et as CountArg, Ft as MeasureKey, G as UpsertManyArgs, Gt as SortDirection, H as RpcOptions, Ht as RelationMeasureArg, It as MutableWhere, J as DbStats, Jt as WhereInput, K as WriteArgs, Kt as SortSpec, L as Repository, Lt as NumericMeasureArg, Mt as JsonPathOps, Nt as ListArgs, O as OffsetPage, Ot as FieldFilter, P as PageOf, Pt as MeasureArg, Q as SearchArgs, Qt as CacheTarget, R as RepositoryOf, Rt as OrderByArg, S as FindExt, St as AggregateResult, T as ManyResult, Tt as ColumnOrderByArg, U as UpdateArgs, Ut as RequestArgs, Vt as ReadArgs, W as UpsertArgs, Wt as SelectArg, X as StatsRecorder, Xt as BucketsHelper, Y as EMPTY_STATS, Yt as BucketRegistry, Z as recordStats, Zt as CacheAdapter, _ as CursorPageArgs, _t as isQuerySpec, a as explainPostgrest, at as ReadSetParamTypes, b as DeleteArgs, bt as AggregateOrderBy, c as RpcDefinition, ct as ReadSetResult, d as BlocksHelper, dt as readSetTables, en as cacheTargetOf, et as InferReadSetParams, f as DbBlockSource, ft as InferResult, g as CursorPage, gt as TableSpecs, h as ConflictTarget, ht as Specs, i as PostgrestExecutorOptions, it as ReadSetParamType, jt as IncludeArgs, k as OffsetPageArgs, kt as GetArgs, l as SupabaseOptions, lt as defineReadSet, m as DbOf, mt as ReadMethod, n as defineSupabase, nn as rowKey, nt as ReadSetAuth, o as postgrestExecutor, ot as ReadSetParamValue, p as DbExtras, pt as QuerySpec, q as WriteManyArgs, qt as WhereArg, r as PostgrestClientLike, rn as rpcCacheTargets, rt as ReadSetOptions, s as ConnectOptions, st as ReadSetParams, t as BetterSupabase, tn as memoryCache, tt as ReadSet, ut as isReadSet, v as Db, vt as specTables, wt as ColumnOrderBy, x as DeleteExt, xt as AggregateOrderByArg, y as DbHelpers, yt as AggregateArgs, z as Returned, zt as OrderByInput } from "./define-DFBnQyYg.js";
+import { X as StoragePath } from "./bucket-CiNi8sIw.js";
+import { a as PostgrestPlan, n as PlanLimit, o as compilePostgrest, r as PlanOrder, t as PlanFilter } from "./postgrest-z-T0l23T.js";
+import { i as FieldSpec, n as TableSchema, o as TableSchemaSpec, r as tableSchema, t as StandardJSONSchemaV1 } from "./table-schema-BlF6k62Q.js";
+import { n as postgrestCompiler, t as Compiler } from "./compiler-D3UmE7ao.js";
+import { t as SPEC_PINS } from "./spec-pins-DIx95afw.js";
 //#region src/core/error-messages.d.ts
 /**
  * A message for every `DbError` kind: a string, or a function of the error.
@@ -96,6 +33,29 @@ type ErrorMessages = { readonly [K in DbErrorKind]: string | ((error: DbErrorOf<
  */
 export declare function createErrorMessages(messages: ErrorMessages): (error: DbError) => string;
 //#endregion
+//#region src/core/validation.d.ts
+interface TableValidators {
+  /** Validates inserts and upserts, with app-cased keys. */
+  readonly insert?: StandardSchemaV1;
+  /** Validates update patches, with app-cased keys. */
+  readonly update?: StandardSchemaV1;
+}
+interface ValidationOptions {
+  /**
+   * Validators per table key. The `validators` export of a generated `zod()` or
+   * `valibot()` module fits as is.
+   */
+  readonly schemas: Readonly<Record<string, TableValidators>>;
+}
+/**
+ * Validates writes with Standard Schema validators (zod, valibot, arktype,
+ * ...). Runs after other plugins (`enforce: 'post'`), so it sees the tenant,
+ * timestamp and actor columns they fill. Failures become `validation` errors
+ * (422) with issue paths; bulk writes prefix the row index. `gen` installs it
+ * on the schema when one of `gen.generators` writes `validators`.
+ */
+export declare function validation(options: ValidationOptions): Plugin<"validation">;
+//#endregion
 //#region src/core/define-repository.d.ts
 /** Adds `Methods` to the repository of `Table` only. */
 interface TableRepositoryExtension<Table extends string, Methods> extends RepositoryExtension {
@@ -110,7 +70,7 @@ interface TableRepositoryExtension<Table extends string, Methods> extends Reposi
  *   betterSupabase,
  *   "customers",
  *   (base) => ({
- *     active: () => base.findMany({ where: { status: "active" } }),
+ *     active: () => base.list({ where: { status: "active" } }),
  *   }),
  * );
  * export const app = betterSupabase.use(customers);
@@ -155,28 +115,15 @@ type PolicyDecision = {
 //#region src/core/cursor.d.ts
 /** Opaque, URL-safe keyset cursor. */
 export declare function encodeCursor(values: readonly unknown[]): string;
-/** The values of a cursor from `encodeCursor` or from `paginate()`. */
+/** The values of a cursor from `encodeCursor` or from `page()`. */
 export declare function decodeCursor(cursor: string): unknown[] | undefined;
 //#endregion
-//#region src/core/table-schema.d.ts
-/** A Standard Schema that also converts to JSON Schema (Standard JSON Schema). */
-interface TableSchema<T> {
-  readonly "~standard": StandardSchemaV1$1.Props<T, T> & StandardJSONSchemaV1.Props<T, T>;
-}
-/**
- * A Standard Schema for one table shape, without a validation library. It
- * validates like the `zod()` and `valibot()` output, drops unknown keys, and
- * converts to JSON Schema for `draft-2020-12`, `draft-07` and `openapi-3.0`.
- * The `standardSchema()` generator emits one per Row, Insert and Update.
- */
-export declare function tableSchema<T>(spec: TableSchemaSpec): TableSchema<T>;
-//#endregion
 //#region src/schema/define.d.ts
 /**
  * Binds generated model types to runtime metadata. Called from the generated
  * module; apps import the returned `schema`, never call this themselves.
  */
-export declare function defineSchema<M extends AnyModels, D = unknown, F extends AnyFunctions = AnyFunctions, S extends string = string>(meta: SchemaMeta): Schema<M, D, F, S>;
+export declare function defineSchema<M extends AnyModels, D = unknown, F extends AnyFunctions = AnyFunctions, S extends string = string, E = unknown>(meta: SchemaMeta, extensions?: readonly AnyPlugin[]): Schema<M, D, F, S, E>;
 export declare function tableMeta(meta: SchemaMeta, table: string): TableMeta;
 //#endregion
 //#region src/schema/enrich.d.ts
@@ -257,4 +204,4 @@ export declare function toCamel(name: string): string;
 /** `firstName` to `first_name`. */
 export declare function toSnake(name: string): string;
 //#endregion
-export { type AccessBucketPolicy, type AccessPolicySql, type AccessTopicPolicy, type Actor, type AggregateArgs, type AggregateFn, type AggregateOrderBy, type AggregateOrderByArg, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type AuthOutageEvent, type BetterResultApi, type BetterResultErr, type BetterResultErrors, type BetterResultOk, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BlockEvent, type BlockEventType, type BlockProblemOptions, type BucketMeta, type BucketPolicyName, type BucketRegistry, type BucketsHelper, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type ColumnOrderBy, type ColumnOrderByArg, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbError, type DbErrorClass, type DbErrorClasses, type DbErrorKind, type DbErrorKinds, type DbErrorMatchers, type DbErrorOf, DbException, type DbHelpers, type DbStats, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type ErrorMessages, type EventHandler, EventHub, type EventMap, type EventName, type Events, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type FieldFilter, type FieldSpec, type FindExt, type FindFirstArgs, type FindManyArgs, type FindOnlyArgs, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionResult, type FunctionSignature, type FunctionSource, type FunctionTypes, type FunctionsOf, type GeneratedColumns, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type JsonPathOps, type LogFields, type Logger, type ManyResult, type ManyReturningArgs, type MappedDbError, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutableWhere, type MutationEvent, type MutationIntent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type OffsetRangeArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type Policy, type PolicyDecision, type PostgrestClientLike, type PostgrestExecutorOptions, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemFormat, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetAuth, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestArgs, type RequestContext, type Result, type ResultColumn, type Returned, type Row, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type SortSpec, type Specs, type StandardJSONSchemaV1, type StandardSchemaV1, StatsRecorder, type StoragePath, type SubjectRef, type SubjectTypeOf, type SupabaseOptions, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSchema, type TableSchemaSpec, type TableSpecs, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type UpsertManyArgs, type ValidationIssue, type WhereInput, type WithExtension, type WritableColumns, type WriteArgs, type WriteManyArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, defineBetterResultErrors, definePlugin, defineReadSet, defineSupabase, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, toBetterResult, toDbError, toProblem, validate };
+export { type AccessBucketPolicy, type AccessPolicySql, type AccessTopicPolicy, type Actor, type AggregateArgs, type AggregateFn, type AggregateOrderBy, type AggregateOrderByArg, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type AuthOutageEvent, type BetterResultApi, type BetterResultErr, type BetterResultErrors, type BetterResultOk, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BlockEvent, type BlockEventType, type BlockProblemOptions, type BlocksHelper, type BucketMeta, type BucketPolicyName, type BucketRegistry, type BucketsHelper, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type ColumnOrderBy, type ColumnOrderByArg, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbBlockSource, type DbError, type DbErrorClass, type DbErrorClasses, type DbErrorKind, type DbErrorKinds, type DbErrorMatchers, type DbErrorOf, DbException, type DbExtras, type DbHelpers, type DbOf, type DbStats, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type ErrorMessages, type EventHandler, EventHub, type EventMap, type EventName, type Events, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type ExtensionsOf, type FieldFilter, type FieldSpec, type FindExt, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionResult, type FunctionSignature, type FunctionSource, type FunctionTypes, type FunctionsOf, type GeneratedColumns, type GetArgs, type GetKey, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type JsonPathOps, type ListArgs, type LogFields, type Logger, type ManyResult, type ManyWriteArgs, type MappedDbError, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutableWhere, type MutationEvent, type MutationIntent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type OffsetRangeArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type Policy, type PolicyDecision, type PostgrestClientLike, type PostgrestExecutorOptions, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemFormat, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetAuth, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RecordRef, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestArgs, type RequestContext, type Result, type ResultColumn, type Returned, type Row, type RowFilter, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type SortSpec, type Specs, type StandardJSONSchemaV1, type StandardSchemaV1, StatsRecorder, type StoragePath, type SubjectTypeOf, type SupabaseOptions, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSchema, type TableSchemaSpec, type TableSpecs, type TableValidators, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type UpsertManyArgs, type ValidationIssue, type ValidationOptions, type WhereArg, type WhereInput, type WithExtension, type WritableColumns, type WriteArgs, type WriteManyArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, defineBetterResultErrors, definePlugin, defineReadSet, defineSupabase, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, tableSchema, toBetterResult, toDbError, toProblem, validate };

package/dist/index.js

@@ -1,23 +1,25 @@
-import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { a as isConflict, c as mapDbError, i as isCheck, l as matchDbError, n as dbError, o as isDbError, s as isForeignKey, u as statusOf } from "./errors-D7u24ZJH.js";
-import { i as tableMeta, r as defineSchema } from "./build-UqJeGtsH.js";
+import { t as DbException } from "./db-exception-Lngc1W49.js";
+import { a as isConflict, c as mapDbError, i as isCheck, l as matchDbError, n as dbError, o as isDbError, s as isForeignKey, u as statusOf } from "./errors-BVFgt8BZ.js";
+import { a as isPlainTime, i as isPlainDateTime, l as provideTemporal, n as isInstant, o as isZonedDateTime, r as isPlainDate } from "./temporal-DLZlWbOi.js";
 import { t as escapeLike } from "./escape-like-DHfx6jRr.js";
+import { a as decodeValue, c as tableMeta, o as encodeValue, s as defineSchema } from "./build-BFC8nFiL.js";
 import { i as or, n as column, r as not, t as and } from "./types-R6syp1el.js";
-import { a as isPlainTime, i as isPlainDateTime, l as provideTemporal, n as isInstant, o as isZonedDateTime, r as isPlainDate } from "./temporal-DLZlWbOi.js";
-import { i as encodeValue } from "./wire-BJhepFbv.js";
-import { a as ok, i as fromBetterResult, n as defineBetterResultErrors, o as toBetterResult, r as err, s as toDbError, t as AsyncResult } from "./result-DIT_qp4G.js";
-import { a as decodeRows, c as rowKey, i as encodeCursor, l as rpcCacheTargets, n as defineSupabase, o as cacheTargetOf, r as decodeCursor, s as memoryCache, t as BetterSupabase } from "./define-DwZ_LQVO.js";
+import { a as ok, i as fromBetterResult, n as defineBetterResultErrors, o as toBetterResult, r as err, s as toDbError, t as AsyncResult } from "./result-ntFBW2p2.js";
+import { a as decodeRows, c as rowKey, i as encodeCursor, l as rpcCacheTargets, n as defineSupabase, o as cacheTargetOf, r as decodeCursor, s as memoryCache, t as BetterSupabase } from "./define-DlUeKHce.js";
 import { n as touchedTables, t as invalidationTargets } from "./tables-Cb-3_VWc.js";
 import { n as silentLogger, t as consoleLogger } from "./logger-glM28NVN.js";
 import { t as EventHub } from "./events-D6IZ5CE8.js";
-import { r as definePlugin, t as PLUGIN_API_VERSION } from "./plugin-D9bYbYli.js";
+import { r as definePlugin, t as PLUGIN_API_VERSION } from "./plugin-AKwwe2gF.js";
 import { t as simplify } from "./simplify-DDO0j0LI.js";
-import { a as postgrestExecutor, i as explainPostgrest, n as StatsRecorder, r as recordStats, t as EMPTY_STATS, u as compilePostgrest } from "./stats-Bt1RyT-F.js";
-import { c as readSetTables, d as isQuerySpec, f as specTables, i as defineReadSet, o as isReadSet } from "./read-set-DP6fm21F.js";
-import { n as validate } from "./standard-l10kE0yS.js";
-import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-D0KDiYPk.js";
-import { n as tableSchema } from "./table-schema-xqSXrjCN.js";
-import { t as SPEC_PINS } from "./spec-pins-D3Tm6HJi.js";
+import { n as postgrestExecutor, s as compilePostgrest, t as explainPostgrest } from "./postgrest-executor-BFW4oWte.js";
+import { n as isQuerySpec, r as specTables } from "./spec-DTWkHzYZ.js";
+import { c as readSetTables, i as defineReadSet, o as isReadSet } from "./read-set-BnKnofIj.js";
+import { n as validate } from "./standard-BA3mLh6w.js";
+import { n as StatsRecorder, r as recordStats, t as EMPTY_STATS } from "./stats-BHl1-zj9.js";
+import { n as toDb, t as toApp } from "./casing-DdFWEtqr.js";
+import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-Bf0cJ7tk.js";
+import { n as tableSchema } from "./table-schema-CD8cJz_M.js";
+import { t as SPEC_PINS } from "./spec-pins-C1Vm8OBl.js";
 import { n as scopeOperation, r as scopeSelection, t as scopeCondition } from "./scope-DgWjuXUw.js";
 //#region src/core/error-messages.ts
 /**
@@ -40,6 +42,83 @@ function createErrorMessages(messages) {
 	};
 }
 //#endregion
+//#region src/core/validation.ts
+/**
+* Rows reach plugins in wire form (ISO text, decimal text), while generated
+* validators expect the column codecs' app values (Temporal, `bigint`).
+*/
+function decoded(table, row) {
+	const app = toApp(table, row);
+	for (const [name, value] of Object.entries(app)) {
+		const codec = table.columns[name]?.codec;
+		if (codec === void 0 || typeof value !== "string") continue;
+		try {
+			app[name] = decodeValue(codec, value);
+		} catch {}
+	}
+	return app;
+}
+function encoded(row) {
+	for (const [name, value] of Object.entries(row)) row[name] = encodeValue(value);
+	return row;
+}
+async function check(schema, table, row, label, index) {
+	const result = await validate(schema, decoded(table, row), label);
+	if (result.ok) {
+		const output = result.data;
+		return typeof output === "object" && output !== null ? {
+			...row,
+			...encoded(toDb(table, output))
+		} : { ...row };
+	}
+	const error = result.error;
+	if (index === void 0 || error.kind !== "validation") throw new DbException(error);
+	const issues = error.issues.map((issue) => ({
+		message: issue.message,
+		path: [index, ...issue.path ?? []]
+	}));
+	throw new DbException(dbError("validation", error.message, { issues }));
+}
+/**
+* Validates writes with Standard Schema validators (zod, valibot, arktype,
+* ...). Runs after other plugins (`enforce: 'post'`), so it sees the tenant,
+* timestamp and actor columns they fill. Failures become `validation` errors
+* (422) with issue paths; bulk writes prefix the row index. `gen` installs it
+* on the schema when one of `gen.generators` writes `validators`.
+*/
+function validation(options) {
+	return definePlugin({
+		name: "validation",
+		enforce: "post",
+		async beforeMutation(op, { table }) {
+			const validators = options.schemas[table.key];
+			if (!validators) return op;
+			switch (op.kind) {
+				case "insert": {
+					const schema = validators.insert;
+					if (!schema) return op;
+					const many = op.rows.length > 1;
+					const rows = await Promise.all(op.rows.map((row, index) => check(schema, table, row, `${table.key} insert`, many ? index : void 0)));
+					return {
+						...op,
+						rows
+					};
+				}
+				case "update": {
+					const schema = validators.update;
+					if (!schema) return op;
+					return {
+						...op,
+						set: await check(schema, table, op.set, `${table.key} update`, void 0)
+					};
+				}
+				case "delete": return op;
+				default: return op;
+			}
+		}
+	});
+}
+//#endregion
 //#region src/core/define-repository.ts
 /**
 * Domain methods for one table, installed with `use()`. `base` is the
@@ -50,7 +129,7 @@ function createErrorMessages(messages) {
 *   betterSupabase,
 *   "customers",
 *   (base) => ({
-*     active: () => base.findMany({ where: { status: "active" } }),
+*     active: () => base.list({ where: { status: "active" } }),
 *   }),
 * );
 * export const app = betterSupabase.use(customers);
@@ -84,4 +163,4 @@ function toSnake(name) {
 	return name.replaceAll(/([a-z0-9])([A-Z])/g, "$1_$2").replaceAll(/([A-Z])([A-Z][a-z])/g, "$1_$2").toLowerCase();
 }
 //#endregion
-export { AsyncResult, BetterSupabase, DbException, EMPTY_STATS, EventHub, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, SPEC_PINS, StatsRecorder, and, cacheTargetOf, column, compilePostgrest, consoleLogger, createErrorMessages, dbError, decodeCursor, decodeRows, defineBetterResultErrors, definePlugin, defineReadSet, defineRepository, defineSchema, defineSupabase, encodeCursor, encodeValue, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, invalidationTargets, isCheck, isConflict, isDbError, isForeignKey, isInstant, isPlainDate, isPlainDateTime, isPlainTime, isProblem, isQuerySpec, isReadSet, isZonedDateTime, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, provideTemporal, readSetTables, recordStats, rowKey, rpcCacheTargets, scopeCondition, scopeOperation, scopeSelection, silentLogger, simplify, specTables, statusOf, tableMeta, tableSchema, toBetterResult, toCamel, toDbError, toProblem, toSnake, touchedTables, validate };
+export { AsyncResult, BetterSupabase, DbException, EMPTY_STATS, EventHub, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, SPEC_PINS, StatsRecorder, and, cacheTargetOf, column, compilePostgrest, consoleLogger, createErrorMessages, dbError, decodeCursor, decodeRows, defineBetterResultErrors, definePlugin, defineReadSet, defineRepository, defineSchema, defineSupabase, encodeCursor, encodeValue, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, invalidationTargets, isCheck, isConflict, isDbError, isForeignKey, isInstant, isPlainDate, isPlainDateTime, isPlainTime, isProblem, isQuerySpec, isReadSet, isZonedDateTime, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, provideTemporal, readSetTables, recordStats, rowKey, rpcCacheTargets, scopeCondition, scopeOperation, scopeSelection, silentLogger, simplify, specTables, statusOf, tableMeta, tableSchema, toBetterResult, toCamel, toDbError, toProblem, toSnake, touchedTables, validate, validation };